Page 1 of 2 12 LastLast
  1.    12 Sep 2017 #1
    Join Date : Nov 2015
    Posts : 195
    Win10

    AutoPlay Security Concerns when Computer is even Locked?


    With Windows 10, I dont know if this security issue is present or not by sticking in a CD/DVD or USB flash stick into a computer and malicius code can execute infecting the system.


    My question is, was this the thing of the past with older Windows versions before Windows 10 was released?

    Another question, when Auto Play is enabled letting all programs to launch automatically, does this only occur when a user is logged on, or can malicious code can even execute automatically using the Auto Play feature EVEN when the system is at the Windows logon prompt or Locked?

    Here is an article on how to disable Auto Play overall in Windows 10.
    https://www.howtogeek.com/236241/how...in-windows-10/


    But my question is mainly, that can this be a security issue even when the machine locked or at the bootup Windows logon prompt?
      My ComputerSystem Spec
  2.    12 Sep 2017 #2
    Join Date : Jan 2015
    UK, Midlands
    Posts : 10,928
    Win 10 Pro (1703)

    It was Autorun that was the principle security risk here, rather than Autoplay.

    Autorun could lead to the execution of an exe file on the inserted medium. You can see the possible risk there.

    Autoplay options are essentially a response to the type of medium inserted and the media on it.
    If you inspect the options available here
    Control Panel\All Control Panel Items\AutoPlay

    for each category, there is little that should pose an obvious security risk.
      My ComputerSystem Spec
  3.    12 Sep 2017 #3
    Join Date : Nov 2015
    Posts : 195
    Win10
    Thread Starter

    Is autorun still a security issue on Windows 10?

    My question is, can anyone just walk to a locked computer and stick a USB device in it and execute malware on it?
    Or does the user need to be logged on for that to happen?

    That's my question here.

    And is there a way to disable Autorun from the Windows 10 user interface?
    I know that Autoplay is there in the Control Panel, but what about Autorun options?
      My ComputerSystem Spec
  4.    13 Sep 2017 #4
    Join Date : Jan 2015
    UK, Midlands
    Posts : 10,928
    Win 10 Pro (1703)

    Perhaps your difficulty is that the terms Autorun and Autoplay became used almost interchangeably, when they were/are two different things. The use of Autorun to launch a program was removed in Win 7.
    Windows 7 USB Autorun.inf

    Thus the ability to launch an exe by this mechanism when inserting a device (an inf file) no longer exists.

    If you do as I say or have already done so at most you can launch a program to play media or open explorer to view the files on an inserted device using Autoplay.

    Given that you can assess the relative risk.

    Here's a tutorial on Autoplay from the Tutorial section
    Turn On or Off AutoPlay in Windows 10 Windows 10 Hardware Drivers Tutorials
    which you're free to browse and search:
    Windows 10 Tutorial Index Windows 10 Tutorials
    Last edited by dalchina; 13 Sep 2017 at 05:10.
      My ComputerSystem Spec
  5.    13 Sep 2017 #5

    I've set mine as shown, hopefully that means it won't auto run a program when inserted.

    Click image for larger version. 

Name:	autoplay.PNG 
Views:	0 
Size:	25.2 KB 
ID:	153093
      My ComputersSystem Spec
  6.    13 Sep 2017 #6
    Join Date : Jan 2015
    UK, Midlands
    Posts : 10,928
    Win 10 Pro (1703)

    The program Autorun executed was a program on the removable device.

    A fundamental difference is that the program launched by Autoplay is one you have installed on your PC, and by definition can be only within a restricted range related to the content and media type.

    The control panel exposes more options which extend at least as far again as those shown.
    Click image for larger version. 

Name:	1.jpg 
Views:	1 
Size:	89.1 KB 
ID:	153094
      My ComputerSystem Spec
  7.    13 Sep 2017 #7
    Join Date : Jul 2015
    Posts : 3,694
    10 Pro

    Quote Originally Posted by win10freak View Post
    Is autorun still a security issue on Windows 10?
    No - there is nothing to worry about. The facility to run programs automatically from external devices has been removed. In the past you could make a file called Autorun.inf and put this line in
    Code:
    OPEN=DodgyProgram.exe
    That would automatically run the program DodgyProgram.exe when you plugged your USB key or inserted your CD. This functionality was removed by Microsoft in Windows Vista as it was (rather obviously in retrospect) very dangerous. See Autorun.inf Entries (Windows)

    Autorun.inf isn't dropped though - you can still do some neat stuff with it if you are so inclined - for example I have this as my autorun.inf on my E drive to specify the drive name and icon
    Code:
    [autorun]
    icon=Kyhi.ico
    label=Kyhi Rescue
    so it looks like this in file explorer.

    Click image for larger version. 

Name:	Capture.PNG 
Views:	1 
Size:	45.3 KB 
ID:	153097
      My ComputerSystem Spec
  8.    13 Sep 2017 #8
    Join Date : Apr 2015
    Posts : 12,811
    W10Prox64

    Quote Originally Posted by lx07 View Post
    Autorun.inf isn't dropped though - you can still do some neat stuff with it if you are so inclined - for example I have this as my autorun.inf on my E drive to specify the drive name and icon
    Code:
    [autorun]
    icon=Kyhi.ico
    label=Kyhi Rescue
    so it looks like this in file explorer.

    Click image for larger version. 

Name:	Capture.PNG 
Views:	1 
Size:	45.3 KB 
ID:	153097
    That's great! I'm sure @Kyhi will like to see that.


    @win10freak
    You could always use Panda's USB vaccine or Bitdefender's USB Immunizer, for extra protection.
    http://www.askvg.com/panda-usb-vacci...lware-attacks/

    But, I don't think there's anything to protect you from one of these, unless you cap the USB ports off.
    USB Killer, yours for $50, lets you easily fry almost every device | Ars Technica

    .
      My ComputerSystem Spec
  9.    13 Sep 2017 #9
    Join Date : Nov 2015
    Posts : 195
    Win10
    Thread Starter

    If Autorun was dropped in Windows 7, then why does the Group Policy for it in Windows 10 still shows to Enable or Disable it? Should I just disable Autorun from the Control Panel or should I disable it only from the Group Policy settings like shown in the image?

    This is really confusing, as most tech articles out there refer Autoplay as the same as Autorun or the other way around...

    And my main concern, can Autorun be executed automatically even when the machine is locked or the user is not logged on?
    Attached Thumbnails Attached Thumbnails Capture.PNG  
      My ComputerSystem Spec
  10.    13 Sep 2017 #10
    Join Date : Jan 2015
    UK, Midlands
    Posts : 10,928
    Win 10 Pro (1703)

    No, as said above; the ability to launch an exe on the external medium from the inf file was dropped. Not Autorun.

    Perhaps your difficulty is that the terms Autorun and Autoplay became used almost interchangeably, when they were/are two different things. The use of Autorun to launch a program was removed in Win 7.
    My post #4.
      My ComputerSystem Spec

 
Page 1 of 2 12 LastLast


Similar Threads
Thread Forum
Reinstall 10 on a locked out W10 computer
An elderly neighbor did a Windows 10 upgrade that, when it was done requested her Microsoft account login which she has no idea what it is, and her daughter while trying to help "may" have changed the password and no one knows what it is. I was able...
Installation and Upgrade
changed computer name now locked out of admin
I changed the PC name and now I have no admin access so I am locked out of making any changes. how can I change it back? or am I hooped... :(
User Accounts and Family Safety
Security Concerns of Consumer Routers / Some Commercial Routers
I am an IT guy, so security is constantly on my mind -- I would like feed back as well some input and opinions into this injustice done by major manufacturers. This is the fact that major manufacturers of Consumer Routers (Mostly) are building in...
User Accounts and Family Safety
removing lock and security from a locked C: drive
Pulled this C drive from my windows 10 computer (which is stuck booting) and have plugged it into the usb on another windows 7 computer want to unlock and remove security so that I can then do a windows repair to the drive and get it booting...
General Support
Solved Windows 10's Wi-Fi Sense password sharing sparks security concerns
Windows 10's Wi-Fi Sense password sharing sparks security concerns | TechHive
AntiVirus, Firewalls and System Security
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 23:53.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums